News for hackers. Stuff that matters.
Re:Salesforce fires red team staffers who gave Defcon talk by defcontalks on Wednesday August 09, 2017 @06:25PM (#14974310)
During the talk they told us why they called it meat pistol.. it's an anagram for metasploit. Meat Pistol made sense because it shoots out malware implants.

Also why pull out in the last 30 mins? And why fire them? No warnings ? Mistakes happen, you don't fire a director for something like that. The PR process is to make sure the company's image looks good, who better knows the Defcon audience? Hackers or PR people who don't understand the framework?

There is really no other way to see it than Salesforce fucked up.

Re:Salesforce fires red team staffers who gave Defcon talk by jackgavigan on Wednesday August 09, 2017 @06:30PM (#14974356)
> During the talk they told us why they called it meat pistol.. it's an anagram for metasploit. Meat Pistol made sense because it shoots out malware implants.

I wonder why they didn't pick Metapistol.

Re:Salesforce fires red team staffers who gave Defcon talk by devrandomguy on Wednesday August 09, 2017 @07:46PM (#14974874)
What are you more likely to remember a week from now: Meatpistol or Metapistol? Reminds me of the resistor color code mnemonic, something I memorized for life the first time I heard it.
Re:Salesforce fires red team staffers who gave Defcon talk by soft_serve on Wednesday August 09, 2017 @09:40PM (#14975552)
Ahh! Violet! I miss her.
Re:Salesforce fires red team staffers who gave Defcon talk by squarefoot on Thursday August 10, 2017 @06:31AM (#14978289)
Leave her alone, she's just 7.
[dead]
Re:Salesforce fires red team staffers who gave Defcon talk by devrandomguy on Wednesday August 09, 2017 @08:46PM (#14975251)
The former, because it is both risque and clever. The latter is just rude and unrelated, and will be forgotten with the rest of the mental trash.
Re:Salesforce fires red team staffers who gave Defcon talk by yellowapple on Thursday August 10, 2017 @12:23AM (#14976328)
The original comment was flagged to oblivion, but I'm assuming it quoted one of the ones on https://en.wikipedia.org/wiki/List_of_electronic_color_code_..., in which case - unless you feel inclined to start yet another Wikipedia edit war - it will probably not "be forgotten with the rest of the mental trash".

I too hope that nobody actually uses such a mnemonic in this day and age, but for such a mnemonic to be forgotten entirely would be a massive loss. Whitewashing the past of its blatant racism and sexism will only serve to erase the reminders we as a society have of why the present is an improvement on the past. Every artifact of such archaic and abhorrent beliefs serves as yet another datapoint demonstrating the whole concept of "Mak[ing] America Great Again™" to be misguided at best and abhorrent at worst.

In other words: we absolutely shouldn't be teaching such a mnemonic in classrooms, but we absolutely should continue to document their existence as evidence of exactly how fucked up the past really was.

Re:Salesforce fires red team staffers who gave Defcon talk by Buge on Thursday August 10, 2017 @02:33AM (#14977018)
No, it's not quoting anything from there. It's just random obscenities jumbled together.

HN has a setting that allows you to view dead posts.

Re:Salesforce fires red team staffers who gave Defcon talk by smokeyj on Wednesday August 09, 2017 @07:23PM (#14974703)
There's a lot of things you can wonder, but they're not all worth mentioning.
Re:Salesforce fires red team staffers who gave Defcon talk by rsj_hn on Wednesday August 09, 2017 @06:30PM (#14974352)
>During the talk they told us why they called it meat pistol.. it's an anagram for metasploit. Meat Pistol made sense because it shoots out malware implants.

OK, try getting a PR department to sign off on that.

Re:Salesforce fires red team staffers who gave Defcon talk by defcontalks on Wednesday August 09, 2017 @06:37PM (#14974400)
The whole point is that they already knew about it before hand(It being called meatpistol, hence the previous meeting) so firing them 30 mins prior is bullshit, hence the drama.

And they presented it at Hushcon before with approval so what's the problem with that?

Re:Salesforce fires red team staffers who gave Defcon talk by rsj_hn on Wednesday August 09, 2017 @06:41PM (#14974422)
And this is what I'm saying is unlikely, because, try getting a PR department to sign off on that.
Re:Salesforce fires red team staffers who gave Defcon talk by dom0 on Wednesday August 09, 2017 @06:50PM (#14974489)
> And they presented it at Hushcon before with approval so what's the problem with that?
Re:Salesforce fires red team staffers who gave Defcon talk by rsj_hn on Wednesday August 09, 2017 @07:07PM (#14974616)
Why do you think they got approval at Hushcon?
Re:Salesforce fires red team staffers who gave Defcon talk by defcontalks on Wednesday August 09, 2017 @10:34PM (#14975836)
Because Salesforce did nothing after hushcon? Which means it would have been approved.. say if it wasn't approved, isn't that a failure on SF's part because the employees would think it's fine.

I don't see why you keep defending Salesforce, they did mess up even if say the employees did not go through the approval process. You don't fire People over that, especially if previous talks are public on the same subject. Especially not at Defcon. That's why SF is in the wrong.

Re:Salesforce fires red team staffers who gave Defcon talk by PeanutCurry on Friday August 11, 2017 @12:48AM (#14986640)
There's a lot of assumptions in this interpretation of events. It's entirely possible that warnings were issued after hushcon and that's why action was so severe this time around. It's also possible that no warnings were ever issued and there is blame for overreacting due to the management. Either way, it seems like there's plenty of information available for interpretation but not conclusion in this scenario.
Re:Salesforce fires red team staffers who gave Defcon talk by jlgaddis on Wednesday August 09, 2017 @09:02PM (#14975347)
Not all companies are like that. I developed an internal admin tool and called it RETARD (it's an acronym).
Re:Salesforce fires red team staffers who gave Defcon talk by foota on Wednesday August 09, 2017 @10:20PM (#14975776)
I'm glad I don't work at a company where that's an acceptable project name.
Re:Salesforce fires red team staffers who gave Defcon talk by TheSpiceIsLife on Wednesday August 09, 2017 @10:54PM (#14975934)
One dictionary I have at hand details five definitions of the word retard.

Why do we have to feel obliged to take offense at the whole word due to one slang definition.

Why should MEATPISTOL be a problem?

retard

1. to make slow; delay the development or progress of (an action, process, etc.); hinder or impede. verb (used without object)

2. to be delayed.

noun

3. a slowing down, diminution, or hindrance, as in a machine.

4. Slang: Disparaging and Offensive. a contemptuous term used to refer to a person who is cognitively impaired.

a person who is stupid, obtuse, or ineffective in some way: a hopeless social retard.

5. Automotive, Machinery. an adjustment made in the setting of the distributor of an internal-combustion engine so that the spark for ignition in each cylinder is generated later in the cycle.

Re:Salesforce fires red team staffers who gave Defcon talk by foota on Thursday August 10, 2017 @12:58AM (#14976551)
I'm not offended and don't take issues with the use of retard in a non-slang context, but for the naming of a project I think it's inappropriate to use a word that could bring back hurtful memories of harassment that people have potentially endured.
Re:Salesforce fires red team staffers who gave Defcon talk by TeMPOraL on Thursday August 10, 2017 @07:32AM (#14978604)
Don't get anywhere near fire retardants...

Seriously, there is a balance to be had. People who went through traumatic events are often offered therapy precisely because you can't reasonably expect the entire world to guess and remove every single thing that can trigger someone's hurtful memories.

Re:Salesforce fires red team staffers who gave Defcon talk by StavrosK on Thursday August 10, 2017 @06:40AM (#14978322)
Then can we at least postpone the renaming until someone actually complains about it first-hand, rather than "just in case" and on someone else's behalf?
Re:Salesforce fires red team staffers who gave Defcon talk by Jach on Thursday August 10, 2017 @01:35AM (#14976745)
Would you name a project the same as your username?
Re:Salesforce fires red team staffers who gave Defcon talk by foota on Thursday August 10, 2017 @02:30AM (#14977002)
That's a historical accident. My name in RuneScape when I played as a kid had football in it and I shortened it to foota.
Re:Salesforce fires red team staffers who gave Defcon talk by jstanley on Thursday August 10, 2017 @12:53AM (#14976518)
I'm glad I don't work at a company where the thought police will come down on you if you don't take yourself too seriously.
Re:Salesforce fires red team staffers who gave Defcon talk by sleepybrett on Thursday August 10, 2017 @10:32AM (#14980065)
"Thought Police" is alt-right for "Nazi"
Re:Salesforce fires red team staffers who gave Defcon talk by lobotryas on Thursday August 10, 2017 @02:08PM (#14982438)
Didn't you get the memo? Anyone who doesn't immediately and fully agree with your position is a "nazi", regardless of what that position is.
Re:Salesforce fires red team staffers who gave Defcon talk by sverhagen on Thursday August 10, 2017 @03:27AM (#14977243)
Still okay if there were any co-workers who found it offensive? Perhaps because it hits home for them?
Re:Salesforce fires red team staffers who gave Defcon talk by true_religion on Wednesday August 09, 2017 @11:34PM (#14976123)
Am I the only one who immediately thinks of the verb form of "retard" when it's presented with absolutely no context?

I'm so used to hearing without any conceit that antibacterial mouthwashes can retard bacterial growth.

Re:Salesforce fires red team staffers who gave Defcon talk by Scoundreller on Thursday August 10, 2017 @01:29AM (#14976712)
Re:Salesforce fires red team staffers who gave Defcon talk by zwily on Thursday August 10, 2017 @01:07AM (#14976603)
I'm glad we haven't been forced to stop using ritardando in music settings yet.
Re:Salesforce fires red team staffers who gave Defcon talk by TeMPOraL on Thursday August 10, 2017 @07:34AM (#14978619)
To me the word "retard" immediately brings to mind fire retardants. Offense is in the eye of the person who takes offense...
[dead]
Re:Salesforce fires red team staffers who gave Defcon talk by throwaway_sf_hn on Wednesday August 09, 2017 @08:06PM (#14975003)
^^ Spot the Salesforce corporate communications team kicking in...
Re:Salesforce fires red team staffers who gave Defcon talk by mgamache on Wednesday August 09, 2017 @08:56PM (#14975316)
ha good catch.
Re:Salesforce fires red team staffers who gave Defcon talk by lightedman on Wednesday August 09, 2017 @11:40PM (#14976141)
"Also why pull out in the last 30 mins?"

Actively developing and planning to release a malware creation tool? That sounds like developing and releasing cyber weaponry. We've got export laws regarding that IIRC.

Re:Salesforce fires red team staffers who gave Defcon talk by lightedman on Thursday August 10, 2017 @01:22AM (#14976683)
Yea. EAR and ITA explicitly cover this, in fact.
Re:Salesforce fires red team staffers who gave Defcon talk by icebraining on Thursday August 10, 2017 @03:48AM (#14977357)
Which part, specifically? The only restriction on the EAR I see that applies is that on encryption, and Part 742.15(b) provides an explicit exception for software where the source is publicly available. That's why, for example, non-US citizens must request a special license to download the paid Metasploit version but can download the open source version freely[1].

[1] https://community.rapid7.com/community/infosec/blog/2015/06/...

Re:Salesforce fires red team staffers who gave Defcon talk by lightedman on Thursday August 10, 2017 @11:43AM (#14980804)
Journal of National Security Law and Policy, Vol. 8, No. 2, 2015. Quite the argument made there that EAR and ITA do indeed deal with the making and distribution of cyber weaponry.
Re:Salesforce fires red team staffers who gave Defcon talk by icebraining on Thursday August 10, 2017 @01:19PM (#14981892)
Thanks for the reference!

I think that article only emphasises that it is not subject to those regulations. Quote:

We conclude that, at a technical level, the distinction between weaponry and non-weapon malicious software lies in the payload component of the tool, which must be capable of creating destructive digital or physical effects

Meatpistol is only a framework, therefore there's no payload component.